WEBVTT

00:00.920 --> 00:02.209
Hey, everyone, welcome back to the

00:02.210 --> 00:03.778
course. So in the last video, we

00:03.950 --> 00:05.599
wrapped up our lab on renumeration

00:05.600 --> 00:07.429
where we use tools like DYG as

00:07.430 --> 00:08.430
well as in Mount.

00:09.340 --> 00:10.659
In this video, we're going to talk

00:10.660 --> 00:12.130
about a tool called Core Impax

00:12.670 --> 00:14.019
will jump right into vulnerability

00:14.020 --> 00:14.829
scanning.

00:14.830 --> 00:16.055
Now, why do we care about

00:16.239 --> 00:17.289
vulnerability scanning as a

00:17.290 --> 00:18.290
penetration tester?

00:18.490 --> 00:19.869
Wolf, for obvious reasons, right.

00:19.900 --> 00:21.309
We want to look for vulnerabilities

00:21.580 --> 00:23.019
during our scanning an enumeration

00:23.020 --> 00:24.940
phase so then we can exploit those

00:25.690 --> 00:26.949
and these fun tools called

00:27.280 --> 00:28.799
vulnerability scanners that the

00:29.050 --> 00:30.050
defenders use.

00:30.190 --> 00:31.840
We can use those as well to find

00:31.990 --> 00:33.429
vulnerabilities on the particular

00:33.430 --> 00:34.899
system or systems we're trying to

00:34.900 --> 00:35.900
access.

00:37.060 --> 00:38.229
So, as I mentioned in this lab will

00:38.230 --> 00:39.750
use a tool called court impact,

00:40.480 --> 00:41.510
so go ahead and logged in the

00:41.860 --> 00:43.269
website, which you should already be

00:43.270 --> 00:44.270
logged in to.

00:44.380 --> 00:45.609
And in the search field, you're

00:45.610 --> 00:46.809
going to look for a vulnerability

00:46.810 --> 00:48.429
scanner setup and configuration.

00:48.430 --> 00:49.869
Now, be careful because there's

00:49.870 --> 00:51.438
actually two different labs with

00:51.820 --> 00:53.486
that same title, but you'll notice

00:53.500 --> 00:55.329
that one says part two with

00:55.330 --> 00:56.979
it. So the part two is actually the

00:56.980 --> 00:58.030
next lab we're going to do.

00:58.540 --> 00:59.649
We just want the vulnerability

00:59.650 --> 01:01.479
scanner setup and configuration one.

01:01.750 --> 01:03.219
And if you click on that, you'll see

01:03.220 --> 01:04.220
a launch. But

01:05.080 --> 01:06.370
once you click on the launch button

01:06.460 --> 01:08.224
may give you a message that you need

01:08.230 --> 01:09.970
to launch it in a separate window.

01:10.420 --> 01:11.439
If it gives you that, just go ahead

01:11.440 --> 01:12.879
and click. You know, launch the item

01:12.880 --> 01:14.589
button in the separate window and it

01:14.590 --> 01:15.790
should launch the lab for you.

01:16.240 --> 01:17.889
Now, this one takes probably about a

01:17.890 --> 01:19.219
minute or so to launch up.

01:19.240 --> 01:20.409
Sometimes it takes up to two

01:20.410 --> 01:21.929
minutes. I found a lot of that,

01:22.180 --> 01:23.919
again, depends on connection, speed

01:23.920 --> 01:24.920
and those sorts of things.

01:25.340 --> 01:27.129
But generally speaking, a minute or

01:27.130 --> 01:28.719
less in the lab should launch for

01:28.720 --> 01:29.720
you.

01:30.500 --> 01:32.239
Once it launches, you'll notice the

01:32.240 --> 01:33.079
little pop up I have in the

01:33.080 --> 01:34.249
background there, that's what you

01:34.250 --> 01:35.419
will see on your end as well.

01:35.750 --> 01:37.369
All you have to do to close out is

01:37.370 --> 01:39.349
just click on next and then OK,

01:39.690 --> 01:40.969
and it'll take you to the login

01:40.970 --> 01:41.970
screen here.

01:44.080 --> 01:45.819
So once we're at the login screen

01:45.820 --> 01:47.535
here and step five, you're going to

01:47.680 --> 01:48.669
go ahead and log in now, it's

01:48.670 --> 01:50.049
already it should default to the

01:50.050 --> 01:51.879
administrator username already if it

01:51.880 --> 01:53.260
doesn't, go ahead and type that in.

01:53.620 --> 01:55.019
But you should only have to enter

01:55.090 --> 01:56.315
the password. So the word

01:56.980 --> 01:58.660
password, we've got a capital P,

01:58.900 --> 02:01.059
the symbol on lowercase

02:01.060 --> 02:03.129
S s w

02:03.460 --> 02:04.680
and then the number zero.

02:04.690 --> 02:06.400
So that's a zero and not a capital O

02:07.480 --> 02:08.999
lowercase are in a lowercase D,

02:09.430 --> 02:10.538
so let's go ahead and type that in

02:10.539 --> 02:11.859
now. And once you touch that and go

02:11.860 --> 02:13.029
ahead and press enter, click the

02:13.030 --> 02:14.949
little arrow key right here

02:15.190 --> 02:16.330
and that will get you logged in.

02:17.680 --> 02:19.389
So P capital P

02:19.630 --> 02:20.757
the at symbol lowercase

02:21.550 --> 02:23.450
ssw the number

02:23.500 --> 02:25.029
zero again that's a zero and not a

02:25.030 --> 02:26.889
capital O and then the lowercase

02:26.890 --> 02:27.909
R d

02:28.900 --> 02:30.269
that I said it might take a moment

02:30.270 --> 02:32.139
or so. Now you may get this pop up

02:32.140 --> 02:32.949
here and actually you probably

02:32.950 --> 02:34.000
should get the pop up here.

02:34.780 --> 02:35.999
Just click on ask me later.

02:36.010 --> 02:37.329
We don't really care that the the

02:37.330 --> 02:39.180
Windows license is not genuine in

02:39.190 --> 02:40.809
this particular virtual machine

02:41.170 --> 02:42.429
and then you'll get this other pop

02:42.430 --> 02:44.139
up here and just say, OK, to that

02:44.140 --> 02:45.708
one. Now, you also may see a pop

02:46.090 --> 02:47.289
up about do you want to restart your

02:47.290 --> 02:48.189
computer?

02:48.190 --> 02:49.719
Technically, there really are not

02:49.720 --> 02:51.484
any changes. We we certainly haven't

02:51.610 --> 02:53.289
done any. So just click on Restart

02:53.290 --> 02:54.459
later and that should give us plenty

02:54.460 --> 02:56.050
of time to complete the lap.

02:57.720 --> 02:59.189
All right, so go ahead and do that

02:59.190 --> 03:00.749
in Paul's video, if you need to go a

03:00.750 --> 03:02.699
little slower on removing all those

03:02.700 --> 03:03.700
paper boxes there.

03:04.840 --> 03:05.679
We're going to move on to the next

03:05.680 --> 03:06.680
step of her lab now,

03:07.570 --> 03:09.039
so here in step seven, we're going

03:09.040 --> 03:10.119
to double click on a little core

03:10.120 --> 03:11.639
impact professional icon on the

03:11.770 --> 03:12.770
desktop.

03:12.820 --> 03:14.559
Now, it does take some time for this

03:14.560 --> 03:16.389
tool to launch, generally

03:16.390 --> 03:18.249
speaking, about 20 to 30 seconds.

03:18.460 --> 03:19.389
So I'm going to go ahead and pause

03:19.390 --> 03:20.169
the video real quick.

03:20.170 --> 03:21.689
And once it comes back up, I'll

03:22.120 --> 03:23.409
go ahead and start the video again

03:23.800 --> 03:25.209
and kind of use the magic of fast

03:25.210 --> 03:26.210
forwarding here.

03:27.320 --> 03:28.579
All right, so we use the magic of

03:28.580 --> 03:30.199
fast forwarding, so this is what you

03:30.200 --> 03:31.459
should see once you've launched a

03:31.460 --> 03:33.077
tool, you'll get you'll start off

03:33.080 --> 03:34.489
with the Tip of the day, pop a box

03:34.490 --> 03:36.349
here. Just go ahead and uncheck

03:36.350 --> 03:37.629
the shot. It's a start up.

03:38.330 --> 03:39.649
It's really not too relevant since

03:39.650 --> 03:40.519
we're not going to launch it. Tool

03:40.520 --> 03:41.929
again, she's a good habit to get

03:41.930 --> 03:43.699
into if you happen to use

03:43.880 --> 03:45.252
this particular tool in your

03:45.590 --> 03:46.489
workplace.

03:46.490 --> 03:47.659
So just don't check that box there

03:47.660 --> 03:48.710
and then just say close.

03:48.950 --> 03:50.089
And that will allow us to actually

03:50.090 --> 03:51.169
access the tool here.

03:52.480 --> 03:53.499
So once you've done that, we'll go

03:53.500 --> 03:54.909
back to our lab document here, so

03:54.910 --> 03:56.019
we've already covered step eight

03:56.020 --> 03:57.460
where we closed the Tip of the Day

03:57.770 --> 03:58.770
box.

03:59.050 --> 04:00.129
So now we're going to create a new

04:00.130 --> 04:02.229
workspace. So as the

04:02.260 --> 04:03.939
creating a new workspace implies,

04:03.940 --> 04:04.749
we're going to click on the new

04:04.750 --> 04:06.189
workspace here at the top left.

04:07.640 --> 04:08.659
Once you click on that, you're going

04:08.660 --> 04:10.159
to click on the blank workspace of

04:10.160 --> 04:11.826
the very top option there is going

04:11.870 --> 04:13.580
to open up this paper box for us.

04:14.670 --> 04:16.410
So in my workspace name,

04:16.890 --> 04:18.509
we want to go ahead and type this

04:18.510 --> 04:20.039
right here, so we're here at step

04:20.040 --> 04:20.819
11.

04:20.820 --> 04:22.078
We want to type in network,

04:22.079 --> 04:24.389
underscore vulnerability, underscore

04:24.390 --> 04:25.639
scan's so just like that.

04:26.460 --> 04:27.559
So let's go and type that in now.

04:27.600 --> 04:29.959
So network underscore

04:29.970 --> 04:31.048
vulnerability and then

04:31.890 --> 04:32.890
underscore can.

04:34.360 --> 04:35.739
All right, so our passphrase here,

04:35.740 --> 04:36.699
we're actually just going to put the

04:36.700 --> 04:38.739
word scanning so

04:38.740 --> 04:40.269
you'll see right here in step 12

04:40.270 --> 04:41.349
where it's going to put scanning and

04:41.350 --> 04:42.219
then we're just going to confirm

04:42.220 --> 04:43.870
with that in the second box as well.

04:44.440 --> 04:45.569
So this type of scanning, all

04:45.570 --> 04:46.570
lowercase.

04:49.280 --> 04:50.329
All right, and once you're complete,

04:50.330 --> 04:51.319
you can go ahead and just click the

04:51.320 --> 04:52.320
finish button there.

04:53.130 --> 04:54.600
That'll create the workspace for us.

04:56.230 --> 04:57.879
All right, so now we're at step 14

04:57.880 --> 04:58.809
here. So what we're going to do at

04:58.810 --> 05:00.525
the very top left here, we're going

05:00.580 --> 05:01.749
to double click where it says

05:01.750 --> 05:03.279
network information gathering.

05:03.280 --> 05:04.540
So set top choice there.

05:05.170 --> 05:06.429
And that's going to open up a little

05:06.430 --> 05:07.459
wizard for us.

05:07.930 --> 05:08.979
So let's go and do the analysis.

05:08.980 --> 05:10.359
Just double click the very top left

05:10.360 --> 05:11.829
on there and you'll see it opens up

05:11.830 --> 05:12.859
the wizard for us now

05:13.930 --> 05:15.039
in The Wizard. We're just going to

05:15.040 --> 05:16.149
click the next button here.

05:16.720 --> 05:18.639
We're going to leave this defaulted

05:18.640 --> 05:20.079
to the core impact program.

05:20.080 --> 05:21.379
We're using that one in this lab.

05:22.180 --> 05:23.410
So just click on next there.

05:24.040 --> 05:25.509
We're going to leave it as IPV

05:25.510 --> 05:26.409
version for.

05:26.410 --> 05:27.519
So let's go ahead and click next

05:27.520 --> 05:28.520
there.

05:28.660 --> 05:29.829
And then we're going to leave this

05:29.830 --> 05:31.689
default network range in place.

05:31.780 --> 05:32.829
Now, if we didn't have that, we

05:32.830 --> 05:34.179
would type in one attitude out one

05:34.180 --> 05:35.860
six eight zero zero

05:36.790 --> 05:37.959
four twenty four.

05:38.410 --> 05:39.699
But we're not worried about that.

05:39.700 --> 05:40.929
It defaulted in there for us.

05:40.930 --> 05:42.069
And so we're just going to say next

05:42.070 --> 05:43.070
there.

05:44.000 --> 05:45.069
Let's go back to that document

05:45.080 --> 05:46.369
before we do this particular

05:47.210 --> 05:48.210
item here.

05:48.410 --> 05:49.609
So we've already gone through most

05:49.610 --> 05:50.869
of these steps. We're gonna step in

05:50.870 --> 05:52.159
right now, but let's just cover what

05:52.160 --> 05:53.989
we've talked about so far.

05:54.260 --> 05:55.260
So we went ahead.

05:55.280 --> 05:56.449
We click the next button, wants to

05:56.450 --> 05:58.279
Wizzard launched here in step

05:58.280 --> 05:59.810
16. We left alone the default.

05:59.820 --> 06:01.069
So it was default to the core

06:01.070 --> 06:02.869
impact. So we left that alone.

06:03.050 --> 06:04.050
We just say next.

06:04.580 --> 06:06.246
And then we also left it to the IP

06:06.350 --> 06:08.269
version four and we click next.

06:08.270 --> 06:09.985
And then again, we just look at the

06:10.100 --> 06:11.423
IP address range and we let

06:12.050 --> 06:13.814
that default alone and we click next

06:13.850 --> 06:15.620
as well. So now we're here step 19.

06:16.130 --> 06:17.149
We're going to actually select a

06:17.150 --> 06:18.910
fast scan for this first one here.

06:19.370 --> 06:20.599
Now, I do want to mention it's going

06:20.600 --> 06:21.419
to take some time.

06:21.420 --> 06:22.669
It might take up to five minutes or

06:22.670 --> 06:24.019
so on this particular one.

06:24.530 --> 06:26.029
One time it took like almost ten

06:26.030 --> 06:27.019
minutes. So that's why I put that

06:27.020 --> 06:27.829
range there.

06:27.830 --> 06:29.270
But generally speaking, it takes me

06:29.300 --> 06:31.039
right around four to five minutes to

06:31.040 --> 06:32.040
complete.

06:32.060 --> 06:33.409
So, again, I'll do some magic of

06:33.410 --> 06:34.978
fast forwarding and we'll take a

06:35.090 --> 06:36.229
look once the scans complete.

06:36.230 --> 06:37.789
So what we're going to do here, just

06:37.790 --> 06:39.162
click on the fast option and

06:39.740 --> 06:40.819
then click the finish button at the

06:40.820 --> 06:41.599
bottom.

06:41.600 --> 06:42.529
And once you're going to notice,

06:42.530 --> 06:44.119
here is a scan run here at the top

06:44.120 --> 06:46.249
right under the status column.

06:46.250 --> 06:47.916
Once this is finished, then you're

06:48.050 --> 06:49.189
good to go and we'll move on to the

06:49.190 --> 06:49.969
next step of the lab.

06:49.970 --> 06:51.349
So, like I said, I'm going to go

06:51.350 --> 06:52.399
ahead, pause the video here.

06:52.940 --> 06:54.529
And actually, based on the time, I'm

06:54.550 --> 06:55.819
probably going to go ahead and start

06:55.820 --> 06:57.109
the video here and we'll pick it

06:57.110 --> 06:58.759
back up in the next video to finish

06:58.760 --> 07:00.470
out the rest of this particular lab.